Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfaceforon access scanning

Eric Paris
2008-08-06T18:07:14Z

On Wed, 2008-08-06 at 12:25 -0400, Rik van Riel wrote:
> On Wed, 6 Aug 2008 17:12:56 +0100
> tvrtko.ursulin@sophos.com wrote:
> > Rik van Riel wrote on 06/08/2008 16:46:04:
>
> > > More importantly, getting info on which bytes in a file changed
> > > will also help backup programs and disk indexing programs.
> >
> > True, but Nick mentioned some huge issues with access after close and
> > munmap in one of your previous postings. It sounds to me that would be a
> > huge VM/filesystem work to actually enable things like this.
>
> A universally useful large change is often easier to get into
> the Linux kernel than a single-purpose hack.

Over engineering in a void for some supposed someday user isn't a good
idea either. If there are other people interested in working together
to come up with a solution to multiple needs I'm here to help!

-Eric